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PROPOSED AMENDED CLAIMS 

1 . (Currently Amended) A system tor extracting information from network data, 
comprising: 

an input interface connected to at least one source of network data; and 

a network event sensor, communicatmg with the input interface, the network event sensor 

comprising 

^ ^T ^t module «V inrpr preier module scanfflBK the network data to 
BfTTi'T" io p'c»l p ™.,^^ of the network fjata.jBd 

-^ ]*r m^ule. r ^mi«Hh.« with rtu> interpreter module, the assembler 
wnM . ^- r ^ ft» in pled miiriinps to penerate at )*.st one session objftff. 
■ ..^ .v^t sens or tmolirt a lex ical pn fi n' m the t least one s^sjon 
^ ro ia^tifv P > ™* ^twork event m at leas t ope of a pT^e T ermined set of event types , 
applet, mla u i i. l i ..inn l mgiu u m dm uow o rl r n aiu lu idmUQ »« 1 i ™n nmw nr V 

8. (To be canceled) The system of claim 1, further comprising an interpreter module, the 
interpreter module scanning the network data to generate logical groupings of the network data. 

12. (To be canceled) The system of claim 8, further comprising an assembler module, 
communicating with the interpreter module, the assembler module scanning the logical 
groupings to generate at least one session object. 
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15. (To be canceled) The system of claim 12, wherein the network event sensor applies 
the lexical engine to the at least one session object to identify the at least one network event as at 
least one of a predetermined set of event types. 

20. (Currently Amended) The system of claim 1 tt> wherein the network event sensor 
applies the lexical engine recursively to identify more than one event type contained in the at 
least one session object. 

Dolujucto ft 128123 iv.l 
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